Skip to content

ISO 24882 BRIDGE PACK

The pack

Seven modules, with editable records, guides and a fictional field sprayer example.

Seven modules, with editable records, guides and a fictional field sprayer example.

Seven modules, with editable records, guides and a fictional field sprayer example.
ModuleWhat it answersFilesISO 24882 (draft)
AG-01What is assessed, which laws apply, how is ISO 24882 used?Word + PDF5.2
AG-02Where is each of the 33 topics in the law, and where is our evidence?Excel5, 6
AG-03Which interfaces, how exposed, which assets?Excel5.2, 5.3
AG-04Which scenarios, how high is each risk, what do we do?Excel + Word + PDF5.3 to 5.9
AG-05For each technical topic: applicable, which control, which test, verified or open?Excel6.2 to 6.26
AG-06Production, updates, vulnerabilities, end of life; what do suppliers commit to?Word + PDF6
AG-07Where do we stand, which gaps, who closes them by when?Excelall

What you get

  • 7 modules in 25 files: 3 Word records with PDF copies, 5 Excel workbooks with built-in checks, a guide, a start page and the licence.
  • Workbooks that calculate likelihood, risk, topic status and ratings, and flag every incomplete row.
  • A completed example for a fictional tractor-mounted field sprayer, consistent ID by ID across all files.
  • Free re-mapping to the published edition of ISO 24882, under the update terms of the licence.
  • Cybersecurity only: functional safety, physical tests and the text of the standard are not included.
  1. AG-01

    Scope and standards record: product boundary, the laws that apply, the status of ISO 24882 and how you use it.

  2. AG-02

    Crosswalk: 33 topics against the Machinery Regulation, the CRA, ISO/SAE 21434, IEC 62443-4-2 and your evidence IDs.

  3. AG-03

    System and interfaces: items, interfaces with their exposure, and the assets to protect.

  4. AG-04

    Risk assessment: scenarios with calculated likelihood and risk, treatment and residual risk, plus the report.

  5. AG-05

    Technical requirements: for each of the 25 technical topics, applicability, control and tests, with status from the test results.

  6. AG-06

    Lifecycle and suppliers: production, updates, vulnerability handling, decommissioning and supplier commitments.

  7. AG-07

    Gaps and evidence: a rating per topic, gaps with owner and due date, overdue items flagged.

Inside the example files

Seven excerpts from the completed example, one per module. Select a module to see the file.

AG-04: likelihood and risk are calculatedEX_AG-04
AG-04: likelihood and risk are calculated
Likelihood follows from the exposure of the entry interface and the attacker effort; risk from the impact. Every risk of 3 or more is reduced.